next-auth

b4429235 - fix: more strict default callback url handling